Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
File: iQH2c8aw_4g16gL67bpbSc8UIk4.mft (raw, json)
Hash identifier: n7KLtdU5cH4dZF/qKn5g258YrPZTaTMxFj8nwlfjvJw=
Subject key identifier: 80:30:4E:C9:B2:99:1D:BE:AC:26:45:3A:FA:52:2A:9A:B6:D4:49:FB
Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Certificate serial: 0194BCE0EBF904C3AA8A87BA2FC77EBB3EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
Manifest number: 0AC9
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: LwODeFlTbNm331VlQw3cZjyD1Sg.roa (hash: 6xKklCkI+s1DbuNSCG9T6RXJeAeTq1fLNQfBDhNCOAU=)
2: iQH2c8aw_4g16gL67bpbSc8UIk4.crl (hash: hNqnTU+5w7XFKmceniHgkHpQjaTfQtwpqB63eY0wGrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:eb:f9:04:c3:aa:8a:87:ba:2f:c7:7e:bb:3e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=80304ec9b2991dbeac26453afa522a9ab6d449fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:f1:07:80:64:30:2a:4e:e2:5d:7a:c0:18:
df:8b:ce:5e:92:b5:94:95:0e:d0:eb:e4:0e:b4:f4:
0d:63:47:fc:9f:e8:f7:63:72:ef:5a:af:bf:52:de:
65:4e:f9:d8:c5:4e:a7:eb:98:f0:9b:6f:22:89:2d:
e6:58:49:68:21:46:22:e3:ba:51:f9:cc:6c:2f:7d:
66:e3:9b:2a:ca:e1:99:a8:7b:a7:ca:99:83:ba:da:
f4:be:dc:d4:bd:18:47:b9:39:47:1b:a0:43:b1:2c:
f1:bc:28:7f:ca:d5:f8:1d:aa:ce:ba:ea:d2:ee:04:
8d:0f:46:f4:43:f2:ee:86:ec:44:91:99:bc:36:90:
e4:1f:1c:05:47:03:a3:dc:eb:d5:64:b0:1c:f8:41:
03:0c:49:3c:53:16:fc:25:1c:7c:3e:b6:15:c3:11:
e8:28:53:36:28:4c:0a:ef:b5:94:07:fc:96:46:7b:
7d:1a:a6:0f:84:cd:08:33:f6:68:91:9e:a9:44:28:
de:07:ab:da:fa:25:e2:6f:ac:34:86:a0:6b:8b:38:
e3:bc:27:12:48:e6:f3:b4:3b:92:f9:43:f1:d5:27:
d1:40:17:84:94:b6:a4:d2:1b:9e:3c:36:71:4a:c1:
de:56:fe:51:07:67:e5:2a:40:43:f6:a0:37:5f:d0:
ff:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:30:4E:C9:B2:99:1D:BE:AC:26:45:3A:FA:52:2A:9A:B6:D4:49:FB
X509v3 Authority Key Identifier:
keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:10:62:65:28:ca:02:cb:00:5a:98:94:c9:b0:3a:7d:75:d4:
d6:22:d8:fb:39:b8:60:1c:ce:b3:1b:09:d4:7d:6b:54:4c:3a:
47:b9:45:78:16:b7:a1:2d:5d:fb:92:f5:0f:4b:8d:37:fd:9a:
c0:f6:9d:0b:3b:88:29:3e:52:22:4b:f7:bb:5f:4e:22:f4:ec:
26:0f:f8:a6:07:fe:ae:fe:86:2a:8b:27:f6:56:d6:4b:4b:3c:
bb:56:c9:cd:03:cf:39:6e:12:0a:4c:b8:04:f0:5f:61:9f:07:
fa:1b:86:f7:8b:d1:47:3a:c1:ff:3d:06:e3:cd:f0:bc:84:0d:
6f:bd:87:4b:7a:a3:56:14:72:18:a2:40:cb:51:39:7b:63:2d:
12:3d:57:4c:4d:e2:3c:a9:89:b3:3c:56:31:84:94:b3:93:98:
d1:97:85:12:02:cc:c3:a1:e8:77:1c:dc:c8:fd:57:22:12:a8:
7a:b0:68:d0:bb:70:a4:79:8a:a1:a7:99:8e:5c:a2:ef:fc:1b:
71:29:4c:7f:11:97:3e:ae:f5:c1:0c:6f:91:b8:5e:d5:9d:48:
e4:f5:df:03:6e:63:be:eb:e0:ce:d8:bc:f1:19:cf:26:62:1b:
cb:53:9d:6c:f1:60:49:16:8c:0f:35:14:aa:a3:9e:40:6f:57:
d6:4a:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:54 2025 by rpki-client